
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a5cd8ca-f2a8-37f7-8359-edd7411420c9.roa
File: 3a5cd8ca-f2a8-37f7-8359-edd7411420c9.roa (raw, json)
Hash identifier: qCAXqrNJeVgAx2+zrk+gEgEBkPgqcmzKvG37r6K5uZo=
Subject key identifier: 00:AB:C0:CE:47:7B:30:79:D7:4C:3E:E3:8C:04:23:A5:02:B9:F2:D8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119E6921C74E3861628A7D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a5cd8ca-f2a8-37f7-8359-edd7411420c9.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33651
IP address blocks: 76.133.70.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:69:21:c7:4e:38:61:62:8a:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=fd1e2d04-17c4-4356-9e6f-0931ed0da266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ad:c8:28:56:55:09:b8:91:4f:3a:79:e0:c3:
8c:40:22:d6:e0:b5:e7:cb:5f:72:93:85:68:e8:ad:
f9:b7:f3:59:dc:4c:d7:f1:2a:08:5b:05:2b:b4:5a:
a4:9e:c4:4f:29:34:20:08:9c:fe:3f:d5:cd:09:1d:
08:ce:ac:70:cc:ba:3c:78:19:4a:69:cc:3e:93:d3:
2c:4d:b0:18:c7:b0:a6:ee:1c:d0:b1:d8:af:98:85:
1a:f6:7a:9b:cb:f7:44:68:38:a4:7c:1f:77:da:4e:
d0:88:42:58:a9:a0:29:a1:6c:5c:3d:0b:d7:1e:a4:
1b:23:0a:b1:31:97:a3:13:22:e9:bf:92:89:69:41:
1f:c3:62:9c:99:84:c4:16:2b:87:65:52:e6:c9:79:
80:d7:e6:e0:11:66:50:d3:3d:e5:1b:41:2f:bc:f1:
a9:ef:8f:dd:11:f4:82:cc:f0:ed:b6:bd:00:3f:88:
9b:1c:94:ad:5c:3d:a6:ef:4d:56:1f:34:7c:2d:b9:
96:44:65:1d:50:5d:97:91:87:96:77:d0:a6:b5:f6:
6f:ab:ef:75:ba:b5:82:be:37:80:b4:2e:b5:e3:9b:
36:b5:53:41:39:36:19:2d:eb:64:56:bb:67:57:21:
ac:d6:ae:48:8d:0b:10:b7:37:51:c2:8c:99:62:87:
2b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AB:C0:CE:47:7B:30:79:D7:4C:3E:E3:8C:04:23:A5:02:B9:F2:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a5cd8ca-f2a8-37f7-8359-edd7411420c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.133.70.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:be:a7:f1:bb:cb:bf:3e:7a:69:25:05:f7:ce:c0:27:aa:c8:
4f:27:32:5f:f3:27:bb:1c:88:d6:66:8b:32:fa:63:34:d0:a2:
54:2e:83:11:95:55:c0:33:da:cc:0a:03:e9:96:94:16:93:3a:
c5:c0:46:8a:59:31:d2:7c:09:fe:f2:49:a2:00:78:e1:61:85:
53:b8:d3:b6:d5:94:47:f0:af:e7:ba:1c:30:6e:b1:ee:5b:2c:
b2:13:a9:03:c5:9d:05:2c:ba:e2:75:f8:15:4c:2f:71:74:29:
78:83:a9:92:72:49:d7:d4:b5:8e:b1:a3:a3:79:e6:5e:2d:f1:
15:a5:bd:da:09:27:aa:ac:e6:e1:b0:8a:cf:60:ee:29:ef:8b:
b7:c1:c5:3b:58:ba:bd:7c:f7:5b:86:40:29:86:4a:92:29:4f:
8b:09:57:67:09:ed:38:51:4c:3c:30:56:df:c6:be:7f:38:36:
03:87:ee:66:24:78:50:a7:50:00:21:a3:1b:e0:ed:68:d8:47:
57:20:11:24:0d:c9:40:ab:52:58:31:37:fe:a5:d7:26:d8:37:
5e:d9:70:d3:f2:9d:6e:a8:fa:aa:69:54:64:37:2d:15:3e:fe:
76:94:d7:68:6f:5a:2e:e8:18:00:82:5b:c1:b5:2f:aa:f2:d4:
59:4b:d9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:42:18 2026 by rpki-client